CVE-2023-24015CWE-1286
Partial DoS on Reports section due to null report name in Guardian/CMC before 22.6.2
Medium · published August 9, 2023
What it is
A partial DoS vulnerability has been detected in the Reports section, exploitable by a malicious authenticated user forcing a report to be saved with its name set as null.
The reports section will be partially unavailable for all later attempts to use it, with the report list seemingly stuck on loading.
The record
Technical detail
- CVSS v4.0
- 5.3 · MEDIUM
- Vector
- CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
- EPSS
- 0.00547 · 45.1th percentile
- Weakness
- CWE-1286 · Improper Validation of Syntactic Correctness of Input
- Published
- 2023-08-09T09:05Z
EPSS history
Timeline